4 ms·

It might be too cumbersome for most, and I might be more paranoid than average, but each project for me means a fresh VM, a new Keepass database and dedicated a

It might be too cumbersome for most, and I might be more paranoid than average, but each project for me means a fresh VM, a new Keepass database and dedicated accounts. Then again I work mostly in ops, and I've seen first hand how badly things can go wrong so isolation and limiting blast radius takes precedence over daily convenience for me.

0cf8612b2e1e 4y ago
That does sound incredibly cumbersome. I suppose that means you are an ace at provisioning machines. How do you move data in/out of the guests? I always found that part of interacting with VMs to be annoyingly painful.
- namaria 4y ago
  There are always trade offs. You do get better at things you do a lot. My mother won't use a password vault because copying and pasting is too much work for her. I'd just rather pay with my time and inconvenience than one day find out some python package I fiddled with for a late night project once means I need to call my bank.
- fbhabbed 4y ago
  SSH. Doesn't even need to be command line, you can just open remote addresses in your favourite graphical file browser, at least under Linux.
bt1a 4y ago
Could you please share some resources/tactics for protecting your host machine from these development VMs? If I were to do this, I would want some assurances (never 100%) that my host is protected from the VM to the best of my ability. (If it makes any difference, I would probably be using VMWare Workstation Pro)
- namaria 4y ago
  I can't give you what you're looking for. You need to decide on the trade offs for yourself. There will always be a risk. Directed attacks can get out of VMs. You could slip up and log into a personal account inside the VM.
  - bt1a 4y ago
    I tried to make it clear in my reply that I understood there are no guarantees. What I’m asking is if you have any guidance on reducing the likelihood of these attacks succeeding
fsflover 4y ago
Why wouldn't you use disposable VMs [0] and secure inter-VM copy [1] on Qubes OS instead? It's much less cumbersome and more secure. [0] https://www.qubes-os.org/doc/how-to-use-disposables/ https://www.qubes-os.org/doc/how-to-use-disposables/ [1] https://www.qubes-os.org/doc/how-to-copy-and-move-files/ https://www.qubes-os.org/doc/how-to-copy-and-move-files/
deleted 4y ago
[deleted]

0cf8612b2e1e 4y ago

That does sound incredibly cumbersome. I suppose that means you are an ace at provisioning machines. How do you move data in/out of the guests? I always found that part of interacting with VMs to be annoyingly painful.

namaria 4y ago
There are always trade offs. You do get better at things you do a lot. My mother won't use a password vault because copying and pasting is too much work for her. I'd just rather pay with my time and inconvenience than one day find out some python package I fiddled with for a late night project once means I need to call my bank.
fbhabbed 4y ago
SSH. Doesn't even need to be command line, you can just open remote addresses in your favourite graphical file browser, at least under Linux.

bt1a 4y ago

Could you please share some resources/tactics for protecting your host machine from these development VMs? If I were to do this, I would want some assurances (never 100%) that my host is protected from the VM to the best of my ability. (If it makes any difference, I would probably be using VMWare Workstation Pro)

namaria 4y ago
I can't give you what you're looking for. You need to decide on the trade offs for yourself. There will always be a risk. Directed attacks can get out of VMs. You could slip up and log into a personal account inside the VM.
- bt1a 4y ago
  I tried to make it clear in my reply that I understood there are no guarantees. What I’m asking is if you have any guidance on reducing the likelihood of these attacks succeeding

fsflover 4y ago

Why wouldn't you use disposable VMs [0] and secure inter-VM copy [1] on Qubes OS instead? It's much less cumbersome and more secure. [0] https://www.qubes-os.org/doc/how-to-use-disposables/ https://www.qubes-os.org/doc/how-to-use-disposables/ [1] https://www.qubes-os.org/doc/how-to-copy-and-move-files/ https://www.qubes-os.org/doc/how-to-copy-and-move-files/

deleted 4y ago

[deleted]